The IT Disaster Recovery test plan includes the steps to test the IT Disaster RecoveryPlan and COOP recovery procedures to minimize the disruptions of critical functionsand the capability to recover critical IT systems in accordance withCOV ITRM 501-01.The outcome may contribute to various plans that properly organize the response,recovery, and continuity activities for disruptions affecting the relationship between ITsystems and business processes supported by the IT systems.Once the Business Impact Analysis and Risk Assessment processes are complete, the business processes and supporting IT systems have been identified along with systemvulnerabilities, threats, and current controls. The order of restoration has also beenidentified in these processes. The IT Disaster Recovery Test Plan involves proceduresusing information from the test results to ensure the contingency plan is able to addressthe risks completely and effectively.The recovery test plan was developed in conjunction with Southside Virginia CommunityCollege Contingency IT Disaster Recovery and COOP Plans to test the rapid andorganized recovery to the full or partial destruction of the College's information technolo-gy capabilities. The purpose of testing is to demonstrate to both management andrecovery teams the ability of one or more vital business processes to continue functioninginside the identified timeframe post a business interruption event. An exercise is not a pass/fail work effort but an opportunity to identify vulnerabilities and gaps in your recovery plan.Resources that could potentially be destroyed or impaired include the following:information, equipment, physical space housing the equipment, software, and personnel.The importance of planning for the eventuality of such losses is vital to limiting theamount of damage, decreasing the length of outages, and lowering the cost of recovery.

SOUTHSIDE VIRGINIA COMMUNITY COLLEGE

INFORMATION TECHNOLOGYSECURITY PLAN

IT Contingency Planning:

IT Disaster Recovery Planning

DRP and COOP Plan Testing

2

Assumptions

This plan was developed based on the following assumptions:

·

One of the backup sites will survive the contingency.

·

Backup media and documentation will be secure at the surviving site.

·

Personnel can be made available to implement the Recovery Plan.

·

In the event of total or partial loss of the College's computer services personnel, assis-tance will be available from VCCS ITS Enterprise Services personnel to implementthe Recovery Plan. In case of widespread regional disruptions access to emergencyresources and personnel may be severely limited.

Recovery Test Plans

Network Infrastructure:

Cisco equipment covered under SmartNet:

The SVCC network infrastructure equipment is covered by the Cisco SmartNet 8 x 5 x NBD. This contract covers any hardware problem and parts with the following equipment(see Attachment C 2.1).In an event of a hardware failure of any of the above mentioned equipment equipment,the following procedure is initiated:If the Internet is accessible go tohttp://www.cisco.com/warp/public/687/Directory/DirTAC.shtmland follow thedirections or call 1-800-553-2447 if the Internet is unavailable

.

SOUTHSIDE VIRGINIA COMMUNITY COLLEGE

INFORMATION TECHNOLOGYSECURITY PLAN

IT Contingency Planning:

IT Disaster Recovery Planning

DRP and COOP Plan Testing

3

Opening a Case

The online TAC Case Open Tool (www.cisco.com/tac/caseopen) is the fastest way toopen

P3 and P4

(priority 3 and 4) cases. After you describe your situation, the TAC CaseOpen Tool recommends resources for an immediate solution. If your issue is not resolvedvia these automatic solutions, your case will be assigned to a Cisco TAC engineer.For

P1 or P2

(priority 1 and 2) cases (when the production network is down or severelydegraded) or if you do not have Internet access, contact the Cisco TAC via telephone.Cisco TAC engineers are assigned immediately to P1 and P2 cases to help keep your business operations running smoothly.To open a case via telephone, use one of the following numbers:

To ensure that all cases are reported in a standard format, Cisco has established case priority definitions.

·

Priority 1 (P1)—

The network is "down" or there is a critical impact to your business operations. You and Cisco will commit all necessary resources aroundthe clock to resolve the situation.

·

Priority 2 (P2)—

Operation of an existing network is severely degraded, or significant aspects of your business operation are negatively affected byinadequate performance of Cisco products. You and Cisco will commit full-timeresources during normal business hours to resolve the situation.